Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
File:                     djNetjP3aUK76Z8Smh64ik1z_Hw.mft (raw, json)
Hash identifier:          7bD7EOfgAFoVZnHS95mBrA9WYvc0MBtAhCR77xv08UU=
Subject key identifier:   FC:BE:79:19:B2:14:F0:23:9F:66:22:FD:7C:62:17:3E:66:68:3F:B2
Authority key identifier: 76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C
Certificate issuer:       /CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
Certificate serial:       0198530E3BCBBCC5915FCD297256D7BC9279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
Manifest number:          1607
Signing time:             Mon 28 Jul 2025 22:01:38 +0000
Manifest this update:     Mon 28 Jul 2025 22:01:38 +0000
Manifest next update:     Tue 29 Jul 2025 22:01:38 +0000
Files and hashes:         1: djNetjP3aUK76Z8Smh64ik1z_Hw.crl (hash: Fsa5z+mEtfcnIjb01ZoMWXhkEOQa0m7J/xywNszJKXY=)
                          2: qv1Sau3fL4G3RgHjzDZHci6uI6I.roa (hash: ET2wfrNdhyfoM3NLg7fIoXPxXSHceauvtrVyaQ0oOdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:3b:cb:bc:c5:91:5f:cd:29:72:56:d7:bc:92:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76335eb633f76942bbe99f129a1eb88a4d73fc7c
        Validity
            Not Before: Jul 28 22:01:38 2025 GMT
            Not After : Jul 29 22:01:38 2025 GMT
        Subject: CN=fcbe7919b214f0239f6622fd7c62173e66683fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:60:8f:41:78:0d:3a:22:6c:fd:88:29:bd:
                    da:51:d1:28:85:fc:35:ba:e8:a0:84:7a:d9:ad:0f:
                    74:83:4b:c6:13:c1:bb:ac:d9:f8:b8:cb:47:32:ca:
                    f2:e3:9c:26:14:0f:3f:c0:b4:b7:bb:6e:09:c1:b6:
                    a5:76:3b:d4:43:a1:3d:ca:e1:63:34:b2:cb:f7:b5:
                    a3:21:a9:c6:3d:01:bf:c4:0a:3c:d4:00:78:f2:6d:
                    88:52:b5:4b:60:49:91:b9:ac:fd:58:b1:25:7b:d0:
                    aa:c4:cc:95:e1:bc:cd:89:74:3c:f7:b8:0e:89:ff:
                    7e:6c:bc:d7:f4:0f:1c:cb:aa:35:a0:ec:d8:d5:94:
                    86:52:44:fa:f9:a2:61:e3:db:c2:ba:43:51:cc:a0:
                    64:2d:73:98:6a:50:0b:2a:26:14:46:f2:89:5d:ad:
                    26:d5:3f:c1:57:b1:0b:98:96:f3:3a:e8:e7:52:9e:
                    5a:c7:26:dc:ca:cb:dc:6c:ab:66:4d:c8:ea:87:71:
                    c7:2d:12:8f:87:7f:92:9c:b4:8f:03:a9:3f:4b:b5:
                    e6:2a:18:2a:79:76:8f:1e:2b:1b:7b:6a:75:21:e2:
                    b6:05:ef:98:a8:83:d9:09:f4:7d:ed:16:0f:6b:98:
                    e9:55:24:95:7e:3e:20:57:a7:a1:e1:a6:ba:cc:f3:
                    fc:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:79:19:B2:14:F0:23:9F:66:22:FD:7C:62:17:3E:66:68:3F:B2
            X509v3 Authority Key Identifier:
                keyid:76:33:5E:B6:33:F7:69:42:BB:E9:9F:12:9A:1E:B8:8A:4D:73:FC:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/djNetjP3aUK76Z8Smh64ik1z_Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/08385a-1e81-41f2-8b85-9c293f71a80a/1/djNetjP3aUK76Z8Smh64ik1z_Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2c:a1:f5:37:be:e5:61:1f:db:37:9f:7f:77:ed:07:92:82:
         7f:bb:c2:6c:45:04:0f:b2:c0:00:d3:48:76:fb:fb:d5:71:1f:
         3f:97:76:70:cd:67:67:9e:7e:2b:a0:2f:79:63:01:fa:4f:98:
         50:a0:70:5d:5e:33:77:d5:bd:62:c3:71:5e:7d:f8:7d:63:60:
         04:66:ce:30:ed:d9:08:a5:3b:47:11:60:e8:dd:6d:f7:b3:76:
         9a:05:f3:1c:99:73:2d:28:45:4b:35:d7:9c:ea:53:e5:bd:03:
         1e:f1:90:8d:8d:5e:96:79:d5:f6:e5:e7:58:a4:4b:95:ba:2e:
         2e:0e:30:86:15:52:c8:6a:c0:9b:c7:04:30:85:0a:2c:c3:90:
         6f:10:4a:ea:b4:67:07:00:e8:0b:a0:da:4a:bd:fa:f9:60:5c:
         e0:4e:1c:81:d6:a7:5b:54:90:a8:6c:5f:9e:38:86:61:d3:66:
         d4:92:5c:c6:60:49:a8:d1:35:80:6f:a3:16:2e:8d:cc:c6:a1:
         3b:4e:53:9e:2a:29:f3:c3:62:e5:c3:64:cd:da:f5:46:8d:26:
         d3:29:59:dc:7c:ac:65:27:88:fd:8e:78:a9:01:39:1a:54:b1:
         17:c6:8f:37:52:e7:2f:c2:e7:cf:03:a1:36:34:03:ef:7f:dd:
         f2:ce:d0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:28:30 2025 by rpki-client